Security Awareness Training Blog

Social Engineering Blog

Latest social engineering news, analysis, tactics the bad guys are using and what you can do to defend your organization.

Five Travel Scams Of The Week

It's summer and a lot of people are on the road, but some of your employees are always traveling for business, and often these are management-level people with access to lots of ...
Continue Reading

[InfoGraphic] Ransomware Threats Concern Survey

We surveyed over 300 system administrators regarding ransomware, here are the results:
Continue Reading

Fascinating Phishing Attack On Bitcoin Auction Bidders

Ever hear of CoinDesk? They are a news site about pricing and other info about digital currencies. They reported a fascinating phishing attack on a list of auction participants.
Continue Reading

The Evolution of Mobile Ransomware

Security experts have warned for years that our smartphones are due for a major cyberattack. Like PCs back in the early days -- the 1990s -- mobile phones are largely unprotected by ...
Continue Reading

Phishing Websites Up 10 percent First Quarter 2014

The United States continued to host the majority of phishing websites in the first quarter of 2014, but did not even crack the top 36 when it came to global computer infection rates, ...
Continue Reading

Can You Fix A Human Problem With A Technology Solution?

Let me be clear from the get-go: maybe partially but never 100%. Hundreds of IT security companies have tried and failed, just look at the malware infections you are battling regularly. ...
Continue Reading

Phishing Scam Of The Week: Free World Cup Trip To Brazil

The 2014 FIFA World Cup football (soccer) has kicked off this week, and so have phishing campaigns trying to trick you into scams for free tickets, realtime news and online streaming of ...
Continue Reading

CryptoLocker Clone Serves Up Energy Bill Spam Campaign

And here's another ransomware wannabe that has ripped off the CryptoLocker brand but is something totally different. A recent spam campaign sending out emails masquerading as an ...
Continue Reading

New Ransomware CryptoWall Comes With A Twist

Continue Reading

That ransomware payment is coming out of your allowance

Cartoon: Parenting is very different in 2014 compared to 1989! "That ransomware payment is coming out of your allowance."
Continue Reading

Scam Of The Week: eBay Password Reset Phishing Emails

Ok, unless you were on an Internet-free vacation (fat chance); you have heard that eBay managed to lose all its 145 million credentials.
Continue Reading

And in THIS corner we have Dave

I thought you would enjoy this cartoon! LOL Stu
Continue Reading

CryptoLocker Goes SpearPhishing

You may be familiar with a site called Spiceworks. They have free system admin and network management software, and their business model is advertising to the hundreds of thousands that ...
Continue Reading

Scam Of The Week: Fake Purchase Orders

This could be a very expensive scam to fall for, so keep on reading.
Continue Reading

Are You Being Targeted By Hot Foreign Spies?

Ready to be hit upon by the likes of Anna Chapman? MI5 in the UK warned that foreign spy agencies are targeting IT workers within big organizations as a means of gaining privileged access ...
Continue Reading

Phishing campaign uses VoIP to steal card data

An Eastern European Cyber Mafia has been found to run a multi-year campaign that targets small U.S. banks and credit unions with a sophisticated VoIP phishing scheme (aka vishing) to ...
Continue Reading

Scam Of The Week: Blended XP Phishing Security Threat

During the first quarter, I have been warning about the coming wave of Windows XP-related scams having to do with the April 8 End Of Life of XP. Here is what you can expect, and many ...
Continue Reading

Scam Of The Week: Starbucks Gift From a Friend Phishing Emails

Love your tall latte? Better watch it, as a "friend" might send you an email with a fake Starbucks Coffee Gift offer. These emails read something like this in broken english. "Your friend ...
Continue Reading

Wall Street Journal Quoted Me Regarding Ransomware Phishing Attacks

This week, Wall Street Journal MarketWatch reporter Priya Anand quoted me in an article she wrote about the new wave of ransomware phishing attacks.
Continue Reading

More Than Half Of End Users Did Not Get Security Awareness Training

This week I attended a webinar about Security Awareness Training hosted by David Monahan, Research Director Security and Risk Management of Enterprise Management Associates.
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews